EUVD-2024-2753

Malicious code in bioql PyPI...

CVE-2024-45857

Deserialization of untrusted data can occur in versions 2.4.0 or newer of the Cleanlab project, enabling a maliciously crafted datalab.pkl file to run arbitrary code on an end user’s system when the data directory is loaded...

CVE-2024-45857

Deserialization of untrusted data can occur in versions 2.4.0 or newer of the Cleanlab project, enabling a maliciously crafted datalab.pkl file to run arbitrary code on an end user’s system when the data directory is loaded...

CVE-2024-45857

Deserialization of untrusted data can occur in versions 2.4.0 or newer of the Cleanlab project, enabling a maliciously crafted datalab.pkl file to run arbitrary code on an end user’s system when the data directory is loaded...

CVE-2024-45857

CVE-2024-45857 affects Cleanlab 2.4.0 and newer. The root cause is deserialization of untrusted data via a crafted datalab.pkl when loading the data directory, enabling arbitrary code execution on the end user’s system. Public descriptions consistently state the issue but do not provide a confirm...